How To Survive A SOC 2 Audit (And Why You Ought To Try)

No ratings

Presented at BSidesVancouver 2019 by

George Pajari

A SOC 2 information security audit report is considered by many (especially many customers of cloud service providers) to be the gold standard in cybersecurity attestation. Whether or not you agree, there is no doubt that for SaaS companies trying to sell into the enterprise space, a clean SOC 2 report can greatly accelerate sales and decrease the effort of going through your customers' third-party risk assessment process.This talk will explain why you ought to consider obtaining a SOC 2 audit, what is involved in preparing for a SOC 2 audit, and how to go through the process with a minimum of grief and pain, by a person who has been there and lived to tell the tale.